pipework 0.7.12 → 0.7.13

package/dist/infra/webhook/outbound.js

@@ -0,0 +1,160 @@
+import { sql } from '../../data/db/sql.js';
+import { signPayload } from './sign.js';
+const DEFAULTS = {
+    table: '__pipework_webhook_endpoints',
+    deliveryTable: '__pipework_webhook_deliveries',
+    maxAttempts: 5,
+    initialDelayMs: 1000,
+    maxDelayMs: 3_600_000,
+    timeoutMs: 30_000,
+};
+export function createOutboundWebhook(config = {}) {
+    const endpointTable = config.table ?? DEFAULTS.table;
+    const deliveryTable = config.deliveryTable ?? DEFAULTS.deliveryTable;
+    const maxAttempts = config.retry?.maxAttempts ?? DEFAULTS.maxAttempts;
+    const initialDelayMs = config.retry?.initialDelayMs ?? DEFAULTS.initialDelayMs;
+    const maxDelayMs = config.retry?.maxDelayMs ?? DEFAULTS.maxDelayMs;
+    const timeoutMs = config.timeoutMs ?? DEFAULTS.timeoutMs;
+    const signingOptions = config.signing ?? {};
+    return {
+        async ensureTables(db) {
+            await db.execute(sql.raw(`
+        CREATE TABLE IF NOT EXISTS ${endpointTable} (
+          id TEXT NOT NULL PRIMARY KEY DEFAULT gen_random_uuid()::text,
+          tenant_id TEXT NOT NULL,
+          url TEXT NOT NULL,
+          secret TEXT NOT NULL,
+          events TEXT[] NOT NULL DEFAULT '{}',
+          active BOOLEAN NOT NULL DEFAULT true,
+          created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+        )
+      `));
+            await db.execute(sql.raw(`
+        CREATE TABLE IF NOT EXISTS ${deliveryTable} (
+          id TEXT NOT NULL PRIMARY KEY DEFAULT gen_random_uuid()::text,
+          endpoint_id TEXT NOT NULL,
+          tenant_id TEXT NOT NULL,
+          event_type TEXT NOT NULL,
+          payload JSONB NOT NULL,
+          status_code INTEGER,
+          response_body TEXT,
+          attempt INTEGER NOT NULL DEFAULT 0,
+          max_attempts INTEGER NOT NULL,
+          next_retry_at TIMESTAMPTZ,
+          completed_at TIMESTAMPTZ,
+          created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+        )
+      `));
+        },
+        async send(db, tenantId, eventType, payload) {
+            const endpoints = await db.execute(sql `SELECT id, url, secret FROM ${sql.raw(endpointTable)}
+            WHERE tenant_id = ${tenantId}
+              AND active = true
+              AND (events = '{}' OR ${eventType} = ANY(events))`);
+            const deliveryIds = [];
+            for (const row of endpoints) {
+                const result = await db.execute(sql `INSERT INTO ${sql.raw(deliveryTable)} (endpoint_id, tenant_id, event_type, payload, max_attempts, next_retry_at)
+              VALUES (${row.id}, ${tenantId}, ${eventType}, ${JSON.stringify(payload)}, ${maxAttempts}, now())
+              RETURNING id`);
+                const inserted = result[0];
+                if (inserted !== undefined)
+                    deliveryIds.push(inserted.id);
+            }
+            return deliveryIds;
+        },
+        async deliver(db, deliveryId) {
+            const rows = await db.execute(sql `SELECT d.id, d.endpoint_id, d.event_type, d.payload, d.attempt, d.max_attempts,
+                   e.url, e.secret
+            FROM ${sql.raw(deliveryTable)} d
+            JOIN ${sql.raw(endpointTable)} e ON e.id = d.endpoint_id
+            WHERE d.id = ${deliveryId} AND d.completed_at IS NULL`);
+            const delivery = rows[0];
+            if (delivery === undefined)
+                return { success: false, statusCode: null };
+            const attempt = delivery['attempt'] + 1;
+            const signed = signPayload(delivery['payload'], delivery['secret'], signingOptions);
+            let statusCode = null;
+            let responseBody = null;
+            let success = false;
+            try {
+                const controller = new AbortController();
+                const timer = setTimeout(() => controller.abort(), timeoutMs);
+                const response = await fetch(delivery['url'], {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                        'X-Webhook-Id': signed.messageId,
+                        'X-Webhook-Timestamp': signed.timestamp.toString(),
+                        'X-Webhook-Signature': signed.signature,
+                    },
+                    body: signed.body,
+                    signal: controller.signal,
+                });
+                clearTimeout(timer);
+                statusCode = response.status;
+                responseBody = await response.text().catch(() => null);
+                success = statusCode >= 200 && statusCode < 300;
+            }
+            catch {
+                statusCode = null;
+                responseBody = null;
+                success = false;
+            }
+            if (success || attempt >= delivery['max_attempts']) {
+                await db.execute(sql `UPDATE ${sql.raw(deliveryTable)}
+              SET attempt = ${attempt}, status_code = ${statusCode},
+                  response_body = ${responseBody}, completed_at = now(), next_retry_at = NULL
+              WHERE id = ${deliveryId}`);
+            }
+            else {
+                const delayMs = Math.min(initialDelayMs * Math.pow(2, attempt - 1), maxDelayMs);
+                const nextRetry = new Date(Date.now() + delayMs);
+                await db.execute(sql `UPDATE ${sql.raw(deliveryTable)}
+              SET attempt = ${attempt}, status_code = ${statusCode},
+                  response_body = ${responseBody}, next_retry_at = ${nextRetry.toISOString()}
+              WHERE id = ${deliveryId}`);
+            }
+            return { success, statusCode };
+        },
+        async processPending(db) {
+            const rows = await db.execute(sql `SELECT id FROM ${sql.raw(deliveryTable)}
+            WHERE completed_at IS NULL AND next_retry_at <= now()
+            ORDER BY next_retry_at ASC
+            LIMIT 100`);
+            let processed = 0;
+            for (const row of rows) {
+                await this.deliver(db, row.id);
+                processed++;
+            }
+            return processed;
+        },
+        async registerEndpoint(db, endpoint) {
+            const rows = await db.execute(sql `INSERT INTO ${sql.raw(endpointTable)} (tenant_id, url, secret, events, active)
+            VALUES (${endpoint.tenantId}, ${endpoint.url}, ${endpoint.secret},
+                    ${`{${endpoint.events.join(',')}}`}, ${endpoint.active})
+            RETURNING id`);
+            return (rows[0]).id;
+        },
+        async listEndpoints(db, tenantId) {
+            const rows = await db.execute(sql `SELECT id, tenant_id, url, secret, events, active
+            FROM ${sql.raw(endpointTable)}
+            WHERE tenant_id = ${tenantId}
+            ORDER BY created_at ASC`);
+            return rows.map(row => ({
+                id: row['id'],
+                tenantId: row['tenant_id'],
+                url: row['url'],
+                secret: row['secret'],
+                events: row['events'],
+                active: row['active'],
+            }));
+        },
+        async removeEndpoint(db, tenantId, endpointId) {
+            const rows = await db.execute(sql `DELETE FROM ${sql.raw(endpointTable)}
+            WHERE id = ${endpointId} AND tenant_id = ${tenantId}
+            RETURNING id`);
+            return rows.length > 0;
+        },
+    };
+}
+//# sourceMappingURL=outbound.js.map

package/dist/infra/webhook/outbound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound.js","sourceRoot":"","sources":["../../../src/infra/webhook/outbound.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAE1C,OAAO,EAAE,WAAW,EAAgC,MAAM,WAAW,CAAA;AA+CrE,MAAM,QAAQ,GAAG;IACf,KAAK,EAAE,8BAA8B;IACrC,aAAa,EAAE,+BAA+B;IAC9C,WAAW,EAAE,CAAC;IACd,cAAc,EAAE,IAAI;IACpB,UAAU,EAAE,SAAS;IACrB,SAAS,EAAE,MAAM;CACT,CAAA;AAEV,MAAM,UAAU,qBAAqB,CAAC,SAAgC,EAAE;IACtE,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAA;IACpD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,CAAA;IACpE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAA;IACrE,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,EAAE,cAAc,IAAI,QAAQ,CAAC,cAAc,CAAA;IAC9E,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAA;IAClE,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAA;IACxD,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAA;IAE3C,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,EAAE;YACnB,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;qCACM,aAAa;;;;;;;;;OAS3C,CAAC,CAAC,CAAA;YAEH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;qCACM,aAAa;;;;;;;;;;;;;;OAc3C,CAAC,CAAC,CAAA;QACL,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO;YACzC,MAAM,SAAS,GAAc,MAAM,EAAE,CAAC,OAAO,CAC3C,GAAG,CAAA,+BAA+B,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;gCAChC,QAAQ;;sCAEF,SAAS,iBAAiB,CACzD,CAAA;YAED,MAAM,WAAW,GAAa,EAAE,CAAA;YAChC,KAAK,MAAM,GAAG,IAAI,SAA6B,EAAE,CAAC;gBAChD,MAAM,MAAM,GAAc,MAAM,EAAE,CAAC,OAAO,CACxC,GAAG,CAAA,eAAe,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;wBAC1B,GAAG,CAAC,EAAE,KAAK,QAAQ,KAAK,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,WAAW;2BAC1E,CAClB,CAAA;gBACD,MAAM,QAAQ,GAAI,MAA2B,CAAC,CAAC,CAAC,CAAA;gBAChD,IAAI,QAAQ,KAAK,SAAS;oBAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YAC3D,CAAC;YAED,OAAO,WAAW,CAAA;QACpB,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU;YAC1B,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA;;mBAEQ,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;mBACtB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;2BACd,UAAU,6BAA6B,CAC3D,CAAA;YAED,MAAM,QAAQ,GAAI,IAAkC,CAAC,CAAC,CAAC,CAAA;YACvD,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;YAEvE,MAAM,OAAO,GAAI,QAAQ,CAAC,SAAS,CAAY,GAAG,CAAC,CAAA;YACnD,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAW,EAAE,cAAc,CAAC,CAAA;YAE7F,IAAI,UAAU,GAAkB,IAAI,CAAA;YACpC,IAAI,YAAY,GAAkB,IAAI,CAAA;YACtC,IAAI,OAAO,GAAG,KAAK,CAAA;YAEnB,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;gBACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;gBAE7D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAW,EAAE;oBACtD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,cAAc,EAAE,MAAM,CAAC,SAAS;wBAChC,qBAAqB,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE;wBAClD,qBAAqB,EAAE,MAAM,CAAC,SAAS;qBACxC;oBACD,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAA;gBAEF,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAA;gBAC5B,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;gBACtD,OAAO,GAAG,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,CAAA;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,GAAG,IAAI,CAAA;gBACjB,YAAY,GAAG,IAAI,CAAA;gBACnB,OAAO,GAAG,KAAK,CAAA;YACjB,CAAC;YAED,IAAI,OAAO,IAAI,OAAO,IAAK,QAAQ,CAAC,cAAc,CAAY,EAAE,CAAC;gBAC/D,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA,UAAU,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;8BACf,OAAO,mBAAmB,UAAU;oCAC9B,YAAY;2BACrB,UAAU,EAAE,CAC9B,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;gBAC/E,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAA;gBAChD,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA,UAAU,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;8BACf,OAAO,mBAAmB,UAAU;oCAC9B,YAAY,qBAAqB,SAAS,CAAC,WAAW,EAAE;2BACjE,UAAU,EAAE,CAC9B,CAAA;YACH,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAA;QAChC,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,EAAE;YACrB,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA,kBAAkB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;;;sBAG7B,CACf,CAAA;YAED,IAAI,SAAS,GAAG,CAAC,CAAA;YACjB,KAAK,MAAM,GAAG,IAAI,IAAwB,EAAE,CAAC;gBAC3C,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;gBAC9B,SAAS,EAAE,CAAA;YACb,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,QAAQ;YACjC,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA,eAAe,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;sBAC1B,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM;sBACtD,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM;yBACjD,CAClB,CAAA;YACD,OAAO,CAAE,IAAyB,CAAC,CAAC,CAAC,CAAE,CAAC,EAAE,CAAA;QAC5C,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ;YAC9B,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA;mBACQ,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;gCACT,QAAQ;oCACJ,CAC7B,CAAA;YACD,OAAQ,IAAkC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrD,EAAE,EAAE,GAAG,CAAC,IAAI,CAAW;gBACvB,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAW;gBACpC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAW;gBACzB,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAW;gBAC/B,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAa;gBACjC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAY;aACjC,CAAC,CAAC,CAAA;QACL,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU;YAC3C,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA,eAAe,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;yBACvB,UAAU,oBAAoB,QAAQ;yBACtC,CAClB,CAAA;YACD,OAAQ,IAAkB,CAAC,MAAM,GAAG,CAAC,CAAA;QACvC,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/infra/webhook/sign.d.ts

@@ -0,0 +1,12 @@
+export interface WebhookSignatureOptions {
+    algorithm?: string;
+    encoding?: 'hex' | 'base64';
+}
+export interface SignedPayload {
+    body: string;
+    signature: string;
+    timestamp: number;
+    messageId: string;
+}
+export declare function signPayload(payload: unknown, secret: string, options?: WebhookSignatureOptions): SignedPayload;
+//# sourceMappingURL=sign.d.ts.map

package/dist/infra/webhook/sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../../src/infra/webhook/sign.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAA;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,wBAAgB,WAAW,CACzB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,uBAA4B,GACpC,aAAa,CAWf"}

package/dist/infra/webhook/sign.js

@@ -0,0 +1,12 @@
+import { createHmac, randomUUID } from 'node:crypto';
+export function signPayload(payload, secret, options = {}) {
+    const algorithm = options.algorithm ?? 'sha256';
+    const encoding = options.encoding ?? 'hex';
+    const messageId = randomUUID();
+    const timestamp = Math.floor(Date.now() / 1000);
+    const body = typeof payload === 'string' ? payload : JSON.stringify(payload);
+    const toSign = `${messageId}.${timestamp}.${body}`;
+    const signature = createHmac(algorithm, secret).update(toSign).digest(encoding);
+    return { body, signature, timestamp, messageId };
+}
+//# sourceMappingURL=sign.js.map

package/dist/infra/webhook/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../../src/infra/webhook/sign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAcpD,MAAM,UAAU,WAAW,CACzB,OAAgB,EAChB,MAAc,EACd,UAAmC,EAAE;IAErC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAA;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAA;IAE1C,MAAM,SAAS,GAAG,UAAU,EAAE,CAAA;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAC5E,MAAM,MAAM,GAAG,GAAG,SAAS,IAAI,SAAS,IAAI,IAAI,EAAE,CAAA;IAClD,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAE/E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;AAClD,CAAC"}

package/dist/infra/webhook/verify.d.ts

@@ -0,0 +1,16 @@
+export interface SignatureVerifier {
+    verify(rawBody: Buffer, headers: Readonly<Record<string, string | undefined>>): boolean;
+}
+type LazySecret = string | (() => string);
+export declare function hmacVerifier(options: {
+    secret: LazySecret;
+    algorithm?: string;
+    header: string;
+    prefix?: string;
+    encoding?: 'hex' | 'base64';
+    computePayload?: (rawBody: Buffer, headers: Readonly<Record<string, string | undefined>>) => Buffer;
+}): SignatureVerifier;
+export declare function stripeVerifier(secret: LazySecret): SignatureVerifier;
+export declare function githubVerifier(secret: LazySecret): SignatureVerifier;
+export {};
+//# sourceMappingURL=verify.d.ts.map

package/dist/infra/webhook/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../src/infra/webhook/verify.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,OAAO,CAAA;CACxF;AAED,KAAK,UAAU,GAAG,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAA;AAMzC,wBAAgB,YAAY,CAAC,OAAO,EAAE;IACpC,MAAM,EAAE,UAAU,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAA;IAC3B,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,KAAK,MAAM,CAAA;CACpG,GAAG,iBAAiB,CAuBpB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,iBAAiB,CA2BpE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,iBAAiB,CAQpE"}

package/dist/infra/webhook/verify.js

@@ -0,0 +1,64 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+function resolveSecret(secret) {
+    return typeof secret === 'function' ? secret() : secret;
+}
+export function hmacVerifier(options) {
+    const algorithm = options.algorithm ?? 'sha256';
+    const encoding = options.encoding ?? 'hex';
+    const prefix = options.prefix ?? '';
+    return {
+        verify(rawBody, headers) {
+            const headerValue = headers[options.header.toLowerCase()];
+            if (headerValue === undefined || headerValue === '')
+                return false;
+            const payload = options.computePayload !== undefined
+                ? options.computePayload(rawBody, headers)
+                : rawBody;
+            const expected = prefix + createHmac(algorithm, resolveSecret(options.secret)).update(payload).digest(encoding);
+            try {
+                return timingSafeEqual(Buffer.from(headerValue), Buffer.from(expected));
+            }
+            catch {
+                return false;
+            }
+        },
+    };
+}
+export function stripeVerifier(secret) {
+    return {
+        verify(rawBody, headers) {
+            const sigHeader = headers['stripe-signature'];
+            if (sigHeader === undefined)
+                return false;
+            const parts = new Map();
+            for (const pair of sigHeader.split(',')) {
+                const eqIdx = pair.indexOf('=');
+                if (eqIdx === -1)
+                    continue;
+                parts.set(pair.slice(0, eqIdx).trim(), pair.slice(eqIdx + 1).trim());
+            }
+            const timestamp = parts.get('t');
+            const v1Sig = parts.get('v1');
+            if (timestamp === undefined || v1Sig === undefined)
+                return false;
+            const signedPayload = Buffer.from(`${timestamp}.${rawBody.toString('utf-8')}`);
+            const expected = createHmac('sha256', resolveSecret(secret)).update(signedPayload).digest('hex');
+            try {
+                return timingSafeEqual(Buffer.from(v1Sig), Buffer.from(expected));
+            }
+            catch {
+                return false;
+            }
+        },
+    };
+}
+export function githubVerifier(secret) {
+    return hmacVerifier({
+        secret,
+        algorithm: 'sha256',
+        header: 'x-hub-signature-256',
+        prefix: 'sha256=',
+        encoding: 'hex',
+    });
+}
+//# sourceMappingURL=verify.js.map

package/dist/infra/webhook/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../src/infra/webhook/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAQzD,SAAS,aAAa,CAAC,MAAkB;IACvC,OAAO,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;AACzD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAO5B;IACC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAA;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAA;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAA;IAEnC,OAAO;QACL,MAAM,CAAC,OAAO,EAAE,OAAO;YACrB,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;YACzD,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE;gBAAE,OAAO,KAAK,CAAA;YAEjE,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,KAAK,SAAS;gBAClD,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC;gBAC1C,CAAC,CAAC,OAAO,CAAA;YAEX,MAAM,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAE/G,IAAI,CAAC;gBACH,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;YACzE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,OAAO;QACL,MAAM,CAAC,OAAO,EAAE,OAAO;YACrB,MAAM,SAAS,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;YAC7C,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAA;YAEzC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;YACvC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBAC/B,IAAI,KAAK,KAAK,CAAC,CAAC;oBAAE,SAAQ;gBAC1B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;YACtE,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAChC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC7B,IAAI,SAAS,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAA;YAEhE,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAC9E,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAEhG,IAAI,CAAC;gBACH,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;YACnE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,OAAO,YAAY,CAAC;QAClB,MAAM;QACN,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,qBAAqB;QAC7B,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAA;AACJ,CAAC"}

package/dist/request/behavior/audited.d.ts

@@ -0,0 +1,5 @@
+import type { ResourceOperations } from '../fixture/types.js';
+import type { AuditedBehaviorConfig } from './types.js';
+import type { Audit } from '../../infra/audit/types.js';
+export declare function applyAudited<TAuth>(ops: ResourceOperations<TAuth>, config: AuditedBehaviorConfig | Audit, resourceName: string): ResourceOperations<TAuth>;
+//# sourceMappingURL=audited.d.ts.map

package/dist/request/behavior/audited.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audited.d.ts","sourceRoot":"","sources":["../../../src/request/behavior/audited.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAc,MAAM,qBAAqB,CAAA;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AACvD,OAAO,KAAK,EAAE,KAAK,EAAoB,MAAM,4BAA4B,CAAA;AAEzE,wBAAgB,YAAY,CAAC,KAAK,EAChC,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAC9B,MAAM,EAAE,qBAAqB,GAAG,KAAK,EACrC,YAAY,EAAE,MAAM,GACnB,kBAAkB,CAAC,KAAK,CAAC,CAkE3B"}

package/dist/request/behavior/audited.js

@@ -0,0 +1,78 @@
+export function applyAudited(ops, config, resourceName) {
+    const audit = 'emit' in config ? config : config.audit;
+    const isConfig = !('emit' in config);
+    const entityType = isConfig && config.entityType !== undefined
+        ? config.entityType
+        : singularize(resourceName);
+    const prefix = isConfig && config.actionPrefix !== undefined
+        ? config.actionPrefix
+        : entityType;
+    const result = { ...ops };
+    if (ops.create !== undefined) {
+        const original = ops.create;
+        result['create'] = {
+            input: original.input,
+            handler: async (db, auth, tenant, input) => {
+                const created = await original.handler(db, auth, tenant, input);
+                const opts = {
+                    actionType: `${prefix}.created`,
+                    entityType,
+                    entityId: extractEntityId(created),
+                    after: created,
+                };
+                await audit.emit(opts);
+                return created;
+            },
+        };
+    }
+    if (ops.update !== undefined) {
+        const original = ops.update;
+        result['update'] = {
+            input: original.input,
+            handler: async (db, auth, tenant, id, input) => {
+                const before = ops.get !== undefined ? await ops.get(db, auth, tenant, id) : null;
+                const updated = await original.handler(db, auth, tenant, id, input);
+                const opts = {
+                    actionType: `${prefix}.updated`,
+                    entityType,
+                    entityId: id,
+                    before: before ?? undefined,
+                    after: updated,
+                };
+                await audit.emit(opts);
+                return updated;
+            },
+        };
+    }
+    if (ops.delete !== undefined) {
+        const original = ops.delete;
+        result['delete'] = async (db, auth, tenant, id) => {
+            const before = ops.get !== undefined ? await ops.get(db, auth, tenant, id) : null;
+            await original(db, auth, tenant, id);
+            const opts = {
+                actionType: `${prefix}.deleted`,
+                entityType,
+                entityId: id,
+                before: before ?? undefined,
+            };
+            await audit.emit(opts);
+        };
+    }
+    return result;
+}
+function extractEntityId(result) {
+    if (result !== null && typeof result === 'object' && 'id' in result) {
+        return String(result.id);
+    }
+    return 'unknown';
+}
+function singularize(s) {
+    if (s.endsWith('ies'))
+        return s.slice(0, -3) + 'y';
+    if (s.endsWith('ses') || s.endsWith('xes'))
+        return s.slice(0, -2);
+    if (s.endsWith('s') && !s.endsWith('ss'))
+        return s.slice(0, -1);
+    return s;
+}
+//# sourceMappingURL=audited.js.map

package/dist/request/behavior/audited.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audited.js","sourceRoot":"","sources":["../../../src/request/behavior/audited.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,YAAY,CAC1B,GAA8B,EAC9B,MAAqC,EACrC,YAAoB;IAEpB,MAAM,KAAK,GAAU,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAA;IAC7D,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,CAAA;IACpC,MAAM,UAAU,GAAG,QAAQ,IAAK,MAAgC,CAAC,UAAU,KAAK,SAAS;QACvF,CAAC,CAAE,MAAgC,CAAC,UAAW;QAC/C,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAA;IAC7B,MAAM,MAAM,GAAG,QAAQ,IAAK,MAAgC,CAAC,YAAY,KAAK,SAAS;QACrF,CAAC,CAAE,MAAgC,CAAC,YAAa;QACjD,CAAC,CAAC,UAAU,CAAA;IAEd,MAAM,MAAM,GAA4B,EAAE,GAAG,GAAG,EAAE,CAAA;IAElD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAA;QAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,KAAK,EAAE,EAAM,EAAE,IAAW,EAAE,MAAc,EAAE,KAAc,EAAE,EAAE;gBACrE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;gBAC/D,MAAM,IAAI,GAAqB;oBAC7B,UAAU,EAAE,GAAG,MAAM,UAAU;oBAC/B,UAAU;oBACV,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC;oBAClC,KAAK,EAAE,OAAO;iBACf,CAAA;gBACD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACtB,OAAO,OAAO,CAAA;YAChB,CAAC;SACF,CAAA;IACH,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAA;QAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,KAAK,EAAE,EAAM,EAAE,IAAW,EAAE,MAAc,EAAE,EAAc,EAAE,KAAc,EAAE,EAAE;gBACrF,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;gBACjF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;gBACnE,MAAM,IAAI,GAAqB;oBAC7B,UAAU,EAAE,GAAG,MAAM,UAAU;oBAC/B,UAAU;oBACV,QAAQ,EAAE,EAAE;oBACZ,MAAM,EAAE,MAAM,IAAI,SAAS;oBAC3B,KAAK,EAAE,OAAO;iBACf,CAAA;gBACD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACtB,OAAO,OAAO,CAAA;YAChB,CAAC;SACF,CAAA;IACH,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAA;QAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,EAAM,EAAE,IAAW,EAAE,MAAc,EAAE,EAAc,EAAE,EAAE;YAC/E,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACjF,MAAM,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;YACpC,MAAM,IAAI,GAAqB;gBAC7B,UAAU,EAAE,GAAG,MAAM,UAAU;gBAC/B,UAAU;gBACV,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,MAAM,IAAI,SAAS;aAC5B,CAAA;YACD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxB,CAAC,CAAA;IACH,CAAC;IAED,OAAO,MAAmC,CAAA;AAC5C,CAAC;AAED,SAAS,eAAe,CAAC,MAAe;IACtC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;QACpE,OAAO,MAAM,CAAE,MAA0B,CAAC,EAAE,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAA;IAClD,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACjE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/D,OAAO,CAAC,CAAA;AACV,CAAC"}

package/dist/request/behavior/cached.d.ts

@@ -0,0 +1,7 @@
+import type { ResourceOperations } from '../fixture/types.js';
+import type { InvalidationBehaviorConfig } from './types.js';
+import type { Cache } from '../../infra/cache/types.js';
+export declare function withInvalidation<TAuth>(ops: ResourceOperations<TAuth>, config: InvalidationBehaviorConfig, resourceName: string): ResourceOperations<TAuth> & {
+    readonly cache: Cache<unknown[]>;
+};
+//# sourceMappingURL=cached.d.ts.map

package/dist/request/behavior/cached.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cached.d.ts","sourceRoot":"","sources":["../../../src/request/behavior/cached.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAc,MAAM,qBAAqB,CAAA;AACzE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA;AAE5D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAEvD,wBAAgB,gBAAgB,CAAC,KAAK,EACpC,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAC9B,MAAM,EAAE,0BAA0B,EAClC,YAAY,EAAE,MAAM,GACnB,kBAAkB,CAAC,KAAK,CAAC,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;CAAE,CAmDlE"}

package/dist/request/behavior/cached.js

@@ -0,0 +1,48 @@
+import { createCache } from '../../infra/cache/create.js';
+export function withInvalidation(ops, config, resourceName) {
+    const listCache = createCache({
+        name: `resource:${resourceName}:list`,
+        database: config.database,
+        ttlMs: config.ttlMs,
+        load: () => Promise.resolve([]),
+    });
+    const result = { ...ops, cache: listCache };
+    if (ops.list !== undefined) {
+        const original = ops.list;
+        result['list'] = async (db, auth, tenant) => {
+            const data = await original(db, auth, tenant);
+            return data;
+        };
+    }
+    if (ops.create !== undefined) {
+        const original = ops.create;
+        result['create'] = {
+            input: original.input,
+            handler: async (db, auth, tenant, input) => {
+                const created = await original.handler(db, auth, tenant, input);
+                listCache.invalidate();
+                return created;
+            },
+        };
+    }
+    if (ops.update !== undefined) {
+        const original = ops.update;
+        result['update'] = {
+            input: original.input,
+            handler: async (db, auth, tenant, id, input) => {
+                const updated = await original.handler(db, auth, tenant, id, input);
+                listCache.invalidate();
+                return updated;
+            },
+        };
+    }
+    if (ops.delete !== undefined) {
+        const original = ops.delete;
+        result['delete'] = async (db, _auth, _tenant, id) => {
+            await original(db, _auth, _tenant, id);
+            listCache.invalidate();
+        };
+    }
+    return result;
+}
+//# sourceMappingURL=cached.js.map

package/dist/request/behavior/cached.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cached.js","sourceRoot":"","sources":["../../../src/request/behavior/cached.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAGzD,MAAM,UAAU,gBAAgB,CAC9B,GAA8B,EAC9B,MAAkC,EAClC,YAAoB;IAEpB,MAAM,SAAS,GAAG,WAAW,CAAY;QACvC,IAAI,EAAE,YAAY,YAAY,OAAO;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;KAChC,CAAC,CAAA;IAEF,MAAM,MAAM,GAA4B,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;IAEpE,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAA;QACzB,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,EAAM,EAAE,IAAW,EAAE,MAAc,EAAE,EAAE;YAC7D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;YAC7C,OAAO,IAAI,CAAA;QACb,CAAC,CAAA;IACH,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAA;QAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,KAAK,EAAE,EAAM,EAAE,IAAW,EAAE,MAAc,EAAE,KAAc,EAAE,EAAE;gBACrE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;gBAC/D,SAAS,CAAC,UAAU,EAAE,CAAA;gBACtB,OAAO,OAAO,CAAA;YAChB,CAAC;SACF,CAAA;IACH,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAA;QAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,KAAK,EAAE,EAAM,EAAE,IAAW,EAAE,MAAc,EAAE,EAAc,EAAE,KAAc,EAAE,EAAE;gBACrF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;gBACnE,SAAS,CAAC,UAAU,EAAE,CAAA;gBACtB,OAAO,OAAO,CAAA;YAChB,CAAC;SACF,CAAA;IACH,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAA;QAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,EAAM,EAAE,KAAY,EAAE,OAAe,EAAE,EAAc,EAAE,EAAE;YACjF,MAAM,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;YACtC,SAAS,CAAC,UAAU,EAAE,CAAA;QACxB,CAAC,CAAA;IACH,CAAC;IAED,OAAO,MAAqF,CAAA;AAC9F,CAAC"}

package/dist/request/behavior/compose.d.ts

@@ -0,0 +1,4 @@
+import type { ResourceOperations } from '../fixture/types.js';
+import type { BehaviorConfig } from './types.js';
+export declare function withBehaviors<TAuth>(ops: ResourceOperations<TAuth>, config: BehaviorConfig, resourceName?: string): ResourceOperations<TAuth>;
+//# sourceMappingURL=compose.d.ts.map

package/dist/request/behavior/compose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose.d.ts","sourceRoot":"","sources":["../../../src/request/behavior/compose.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAKhD,wBAAgB,aAAa,CAAC,KAAK,EACjC,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAC9B,MAAM,EAAE,cAAc,EACtB,YAAY,CAAC,EAAE,MAAM,GACpB,kBAAkB,CAAC,KAAK,CAAC,CAiB3B"}

package/dist/request/behavior/compose.js

@@ -0,0 +1,18 @@
+import { applyVersioned } from './versioned.js';
+import { applyAudited } from './audited.js';
+import { withInvalidation } from './cached.js';
+export function withBehaviors(ops, config, resourceName) {
+    const name = resourceName ?? 'resource';
+    let decorated = ops;
+    if (config.versioned !== undefined) {
+        decorated = applyVersioned(decorated, config.versioned, name);
+    }
+    if (config.audited !== undefined) {
+        decorated = applyAudited(decorated, config.audited, name);
+    }
+    if (config.cached !== undefined) {
+        decorated = withInvalidation(decorated, config.cached, name);
+    }
+    return decorated;
+}
+//# sourceMappingURL=compose.js.map

package/dist/request/behavior/compose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../../src/request/behavior/compose.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,MAAM,UAAU,aAAa,CAC3B,GAA8B,EAC9B,MAAsB,EACtB,YAAqB;IAErB,MAAM,IAAI,GAAG,YAAY,IAAI,UAAU,CAAA;IACvC,IAAI,SAAS,GAAG,GAAG,CAAA;IAEnB,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,SAAS,GAAG,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC/D,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,SAAS,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAC3D,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,SAAS,GAAG,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC9D,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/request/behavior/index.d.ts

@@ -0,0 +1,6 @@
+export { withBehaviors } from './compose.js';
+export { applyVersioned } from './versioned.js';
+export { applyAudited } from './audited.js';
+export { withInvalidation } from './cached.js';
+export type { BehaviorConfig, VersionedBehaviorConfig, AuditedBehaviorConfig, InvalidationBehaviorConfig } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/request/behavior/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/request/behavior/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,YAAY,EAAE,cAAc,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA"}

package/dist/request/behavior/index.js

@@ -0,0 +1,5 @@
+export { withBehaviors } from './compose.js';
+export { applyVersioned } from './versioned.js';
+export { applyAudited } from './audited.js';
+export { withInvalidation } from './cached.js';
+//# sourceMappingURL=index.js.map

package/dist/request/behavior/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/request/behavior/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA"}

package/dist/request/behavior/namespace.d.ts

@@ -0,0 +1,16 @@
+import { withBehaviors } from './compose.js';
+import { applyVersioned } from './versioned.js';
+import { applyAudited } from './audited.js';
+import { withInvalidation } from './cached.js';
+/** Resource behavior decorators — compose versioning, audit trails, and cache invalidation onto CRUD operations. */
+export declare const behavior: {
+    /** Applies multiple behaviors to a ResourceOperations set in order. */
+    compose: typeof withBehaviors;
+    /** Adds optimistic concurrency control via a version column — rejects stale updates. */
+    versioned: typeof applyVersioned;
+    /** Wraps operations to emit audit records on create/update/delete. */
+    audited: typeof applyAudited;
+    /** Wraps operations to invalidate a cache on mutations. Returns ops with an attached .cache handle. */
+    invalidate: typeof withInvalidation;
+};
+//# sourceMappingURL=namespace.d.ts.map

package/dist/request/behavior/namespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../../src/request/behavior/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,oHAAoH;AACpH,eAAO,MAAM,QAAQ;IACnB,uEAAuE;;IAEvE,wFAAwF;;IAExF,sEAAsE;;IAEtE,uGAAuG;;CAExG,CAAA"}

package/dist/request/behavior/namespace.js

@@ -0,0 +1,16 @@
+import { withBehaviors } from './compose.js';
+import { applyVersioned } from './versioned.js';
+import { applyAudited } from './audited.js';
+import { withInvalidation } from './cached.js';
+/** Resource behavior decorators — compose versioning, audit trails, and cache invalidation onto CRUD operations. */
+export const behavior = {
+    /** Applies multiple behaviors to a ResourceOperations set in order. */
+    compose: withBehaviors,
+    /** Adds optimistic concurrency control via a version column — rejects stale updates. */
+    versioned: applyVersioned,
+    /** Wraps operations to emit audit records on create/update/delete. */
+    audited: applyAudited,
+    /** Wraps operations to invalidate a cache on mutations. Returns ops with an attached .cache handle. */
+    invalidate: withInvalidation,
+};
+//# sourceMappingURL=namespace.js.map

package/dist/request/behavior/namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../../src/request/behavior/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,oHAAoH;AACpH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,uEAAuE;IACvE,OAAO,EAAE,aAAa;IACtB,wFAAwF;IACxF,SAAS,EAAE,cAAc;IACzB,sEAAsE;IACtE,OAAO,EAAE,YAAY;IACrB,uGAAuG;IACvG,UAAU,EAAE,gBAAgB;CAC7B,CAAA"}

package/dist/request/behavior/types.d.ts

@@ -0,0 +1,23 @@
+import type { Audit } from '../../infra/audit/types.js';
+import type { SQL, DB } from '../../data/db/types.js';
+export interface VersionedBehaviorConfig {
+    readonly table: string;
+    readonly whereFromId?: (id: string) => SQL;
+    readonly softDelete?: boolean;
+    readonly beforeRevise?: (db: DB, auth: unknown, tenant: string, id: string, input: unknown) => Promise<void>;
+}
+export interface AuditedBehaviorConfig {
+    readonly audit: Audit;
+    readonly entityType?: string;
+    readonly actionPrefix?: string;
+}
+export interface InvalidationBehaviorConfig {
+    readonly ttlMs: number;
+    readonly database: string;
+}
+export interface BehaviorConfig {
+    readonly versioned?: VersionedBehaviorConfig;
+    readonly audited?: AuditedBehaviorConfig | Audit;
+    readonly cached?: InvalidationBehaviorConfig;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/request/behavior/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/request/behavior/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AACvD,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAErD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,GAAG,CAAA;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7G;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,uBAAuB,CAAA;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,KAAK,CAAA;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,0BAA0B,CAAA;CAC7C"}

package/dist/request/behavior/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/request/behavior/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/request/behavior/types.ts"],"names":[],"mappings":""}

package/dist/request/behavior/versioned.d.ts

@@ -0,0 +1,4 @@
+import type { ResourceOperations } from '../fixture/types.js';
+import type { VersionedBehaviorConfig } from './types.js';
+export declare function applyVersioned<TAuth>(ops: ResourceOperations<TAuth>, config: VersionedBehaviorConfig, _resourceName: string): ResourceOperations<TAuth>;
+//# sourceMappingURL=versioned.d.ts.map

package/dist/request/behavior/versioned.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"versioned.d.ts","sourceRoot":"","sources":["../../../src/request/behavior/versioned.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAc,MAAM,qBAAqB,CAAA;AACzE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAKzD,wBAAgB,cAAc,CAAC,KAAK,EAClC,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAC9B,MAAM,EAAE,uBAAuB,EAC/B,aAAa,EAAE,MAAM,GACpB,kBAAkB,CAAC,KAAK,CAAC,CAkC3B"}